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Listing of the Claims : 

A clean version of the entire set of pending claims (including amendments to 
the claims, if any) is submitted herewith per 37 CFR 1 .121(c)(3). This listing of 
claims will replace all prior versions, and listings, of claims in the application. 

1 . (Previously Presented) A network, comprising: 
terminals; 

a software system distributed over all the terminals; and 
at least one access controlled object, 

wherein the software system includes at least a filter which evaluates access 
rights of a user for the access controlled object based on data which are not 
available until the time of access, the filter further evaluating additional data 
occurring while the user has access to the access control object, monitoring a 
change in the access rights, and triggering withdrawal of the access rights to the 
access controlled object. 

2. (Canceled) 

3. (Previously Presented) The network of claim 1 , wherein in the software 
system further comprises a resource manager which withdraws the access rights. 

4. (Previously Presented) The network of claim 3, wherein the software 
system includes an access right manager which, together with the filter, is instructed 
by the resource manager to check the access rights. 

5. (Previously Presented) A network, comprising: 
a plurality of terminals; 

a plurality of access control objects; and 

a software system distributed among the terminals, the software system 
further comprising, 
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an access right manager and a filter which evaluates access rights of 
users to access the access control objects, wherein the access right manager has a 
data structure in the form of a tree for arranging the access controlled objects and 
wherein the tree includes a plurality of nodes which each contain a list of permitted 
users or user groups respectively, of an access controlled object and for each user 
or user group respectively, include a list of methods of use. 

6. (Previously Presented) The network of claim 5, wherein the filter is 
adapted to further evaluate additional data occurring while a user has access to an 
access control object, monitoring a change in the access rights, and triggering 
withdrawal of the access rights to the access controlled object. 

7. (Previously Presented) A network, comprising: 
a plurality of terminals connected by a bus; 

a plurality of access control objects; and 

a software system adapted to reserve use of a first one the access control 
objects by a user via one of the terminals, wherein the software system further 
comprises a filter adapted to continuously monitor dynamic data affecting access 
rights to the first control object and, in response to the dynamic data, to generate a 
message indicating withdrawal of the access rights of the user to the first access 
control object, the software system being adapted to release the reservation of the 
first access control object in response to the message from the filter. 
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